--- parser3/tests/186.html 2008/07/22 13:13:10 1.3 +++ parser3/tests/186.html 2010/07/13 05:12:28 1.4 @@ -1,4 +1,4 @@ -$request:charset[utf-8] +$request:charset[utf-8] $sValue[abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789 @@ -15,15 +15,15 @@ Origin:
-$sEscapeValued[^sValue.js-escape[]] +$sEscapedValue[^sValue.js-escape[]] Escaped:
-=^taint[html][$sEscapeValued]=
+=^taint[html][$sEscapedValue]=
 

-$sUnescapedValue[^string:js-unescape[$sEscapeValued]] +$sUnescapedValue[^string:js-unescape[$sEscapedValue]] Unescaped [^if($sUnescapedValue eq $sValue){equal to source}{NOT equal to source}]:
 =^taint[html][$sUnescapedValue]=
@@ -38,3 +38,13 @@ $s[$v]
 =^s.js-escape[]=
 =^string:js-unescape[$s]=
 
+ + +
+# replace %uXXXX to \uXXXX and check escaping again +$sEscapedValue2[^sEscapedValue.match[%u][gi]{\u}] +
+=^taint[html][$sEscapedValue2]=
+
+$sUnescapedValue2[^string:js-unescape[$sEscapedValue2]] +Unescaped [^if($sUnescapedValue2 eq $sValue){equal to source}{NOT equal to source}]